当前位置：网站首页>[ACTF2020 Freshman Competition]Upload 1

[ACTF2020 Freshman Competition]Upload 1

2022-08-05 18:32:00 【Work hard to be a big guy m0_68074153】

1. Judge the filter form

The front-end pop-up window should be judged as front-end filtering.First capture and modify
Insert image description here
I found that the backend still has filtering

2.php file can parse the extension

Using middleware parsing loopholes to bypass inspections, commonly used in actual combat
Upload .user.ini or .htaccess to parse legal extension files as php files
%00 truncation bypass
php3 files
php4 file
php5 file
php7 file
phtml file
phps file
pht file

By trying to find out that the detection can be bypassed with phtml.
Insert image description here
Ant sword connection to get flag